Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa
File:                     548211a7-ec86-3843-8027-0b84f68da757.roa (raw, json)
Hash identifier:          nHbvIijEhLCzHDyCSrvYKsPqAbF5MXv1LQtU3qWoPrw=
Subject key identifier:   31:FC:BC:07:8A:CE:A1:C8:E2:4A:11:B5:62:56:9B:B9:57:36:F2:2B
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584567BA24EA496752B8DE3FCD80
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa
Signing time:             Mon 01 Apr 2024 21:29:24 +0000
ROA not before:           Mon 01 Apr 2024 21:29:24 +0000
ROA not after:            Sun 30 Jun 2024 21:29:24 +0000
asID:                     35847
IP address blocks:        170.203.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:ba:24:ea:49:67:52:b8:de:3f:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Apr  1 21:29:24 2024 GMT
            Not After : Jun 30 21:29:24 2024 GMT
        Subject: CN=58122b52-6d22-45a7-b0cb-983664157c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:2b:5c:c0:4c:f9:ee:97:53:7b:00:3a:85:
                    3b:dc:97:89:34:29:0a:cb:a1:06:6f:73:e9:10:18:
                    70:00:77:22:8d:aa:eb:9a:f4:05:7d:bd:29:fb:7f:
                    16:7f:23:d8:9f:60:c8:46:da:78:ed:01:ef:06:7d:
                    f4:33:62:16:81:a7:5f:cf:ec:61:c1:1f:13:d1:3a:
                    0d:cd:11:be:ae:35:c9:da:4d:d6:8d:df:65:17:8b:
                    9a:cb:ab:22:ff:8d:bd:a9:53:ab:13:51:c4:f3:08:
                    fc:f0:a1:e3:ab:f8:2d:42:ca:80:6a:5a:0e:5a:24:
                    8a:08:44:a4:da:b5:88:5c:52:94:d8:c5:d4:f7:42:
                    36:b2:a6:d4:89:09:34:e3:14:6d:0e:ec:f1:c6:da:
                    37:46:d6:0b:cc:bd:bd:dc:9c:16:91:47:d1:49:14:
                    c6:b2:4c:2b:1f:d9:3c:76:c2:90:be:a6:85:05:8f:
                    77:da:52:88:2e:cd:26:4a:72:d7:84:02:6b:3b:1e:
                    db:d2:e1:83:99:fd:57:72:b0:de:ae:d5:77:4c:b0:
                    3c:76:e5:1c:47:0e:18:a0:ea:45:1f:77:87:be:24:
                    69:3d:13:44:cc:a4:af:e0:05:c0:07:96:44:c8:7c:
                    1f:8a:44:90:3c:04:36:8a:f2:c3:8b:26:c8:b3:f5:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:BC:07:8A:CE:A1:C8:E2:4A:11:B5:62:56:9B:B9:57:36:F2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.203.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:3b:d9:f9:9b:00:90:25:95:f7:d2:0a:06:10:7d:40:e0:
         16:44:79:9a:13:ff:2d:27:99:7e:cd:32:e8:c8:07:aa:b6:a0:
         79:93:5e:c4:9f:33:62:47:39:59:19:09:23:c4:f6:52:99:2b:
         7d:71:61:52:4a:e8:22:35:b5:99:0c:c0:75:63:e3:ca:12:2f:
         6c:5b:99:fa:7d:6c:2d:ef:ef:90:83:f0:e1:0c:83:6b:4c:e9:
         84:64:c9:85:94:1e:a5:d5:f3:39:16:47:0c:b5:b0:de:aa:32:
         fa:16:64:5e:df:ad:55:03:23:4e:e2:b2:e8:ee:31:77:eb:dc:
         66:15:c8:62:e7:b3:6c:e4:ee:20:87:e5:11:75:d6:a9:98:d9:
         e7:0f:ac:a3:31:54:8f:aa:f8:ca:72:3e:ae:85:c3:00:9d:67:
         bc:aa:d0:6f:88:5f:30:a2:42:d9:60:40:24:45:3b:41:32:e5:
         0e:69:b0:02:b0:26:ac:86:ab:e3:61:81:34:40:14:f8:1f:25:
         fd:7f:1a:c2:9f:bb:09:c1:71:de:33:16:98:f8:a7:af:78:d2:
         39:f1:e9:27:31:0a:14:ba:fd:42:a2:62:eb:de:40:00:33:8f:
         0e:c3:87:a3:2d:b1:b7:ad:9b:72:54:81:70:77:85:89:e0:ec:
         73:25:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 02:27:25 2024 by rpki-client on console-ams.rpki-client.org